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1 . (Currently amended) A method for providing concurrency control for a 
licy-based management system/that controls resources in a distributed 
computing system, the method comprising: 

receiving a request to perform an operation on a lockable resource from a 
controller in the distributed computing system, wherein the lockable resource 
presents one or more independent locks providing access to independent sub-units 
of the resource and wherein the one or more independent locks allow multiple 
controllers to lock independent sub-units of the lockable resource independently; 
wherein the controller and a policy governing the controller comprise a 



lockable resource, whereby a policy may control a lock on a second policy and the 



second policy may control a lock on a lockable resource; 



wherein the controller s 
for controlling resources in the 
determining whether th£ 
allowing the controller 
the controller holds the lock on 



nds the request in order to enforce a first policy 
distributed computing system; 
controller holds a lock on the lockable resource; 
o execute the operation on the lockable resource if 



the lockable resource; 
allowing the controller ;o acquire the lock if the controller does not hold 
the lock on the lockable resource; and 



;o execute the operation on the lockable resource if 



allowing the controller 
the controller acquires the lock 



2. (Original) The methcd of claim 1, wherein the first policy is configured 
to command resources in the d stributed computing system to perform actions so 
that the distributed computing system operates in accordance with a rule that is 
enforced by the first policy, wherein the rule governs behavior of resources within 
the distributed computing system. 
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1 3. (Original) The method of claim 1 5 further comprising throwing an 

2 exception if the controller does nDt hold the lock on the lockable resource and if 

3 the controller does not acquire the lock. 

1 4. (Original) The method of claim 1, wherein the lock held on the lockable 

2 resource expires after a pre-specified lease period, unless the lease is renewed 

3 within the pre-specified lease period. 



1 5. (Original) The method 

2 includes a resource within the 



)f claim 1, wherein the lockable resource 
distributed computing system. 



6. (Original) The method 
includes a second policy for contr 
system. 



7. (Original) The method 



of claim 1, wherein the lockable resource 
Dlling resources in the distributed computing 



of claim 1, wherein the controller includes a 



client in the distributed computing system 



1 8. (Original) The method 

2 first policy for controlling 



of claim 1, wherein the controller includes the 
resources in the distributed computing system. 



9. (Original) The method of claim 1, wherein the controller includes a 



higher-level policy for controlling 
and wherein the lockable resource 



resources in the distributed computing system 



resources in the distributed computing system, 
includes a lower-level policy for controlling 
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1 10. (Original) The iriethod of claim 1 , wherein allowing the controller to 

2 acquire the lock includes avowing the controller to acquire the lock from a 

3 resource that allocates locp to controllers. 

11. (Cancelled) 

1 12. (Currently amended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 

3 method for providing concurrency control for a policy-based management system 

4 that controls resources in a distributed computing system, the method comprising: 

5 receiving a reque it to perform an operation on a lockable resource from a 

6 controller in the distribu ed computing system, wherein the lockable resource 

7 presents one or more inc ependent locks providing access to independent sub-units 

8 of the resource and whetein the one or more independent locks allow multiple 

9 controllers to lock independent sub-units of the lockable resource independently; 

10 wherein the controller and a policy governing the controller comprise a 

11 lockable resource, whereby a policy may control a lock on a second policy and the 

12 second policy may control a lock on a lockable resource; 

13 wherein the controller sends the request in order to enforce a first policy 

14 for controlling resources in the distributed computing system; 

1 5 determining whither the controller holds a lock on the lockable resource; 

16 allowing the controller to execute the operation on the lockable resource if 

1 7 the controller holds the lock on the lockable resource; 

1 8 allowing the controller to acquire the lock if the controller does not hold 

1 9 the lock on the lockable resource; and 

20 allowing the controller to execute the operation on the lockable resource if 

2 1 the controller acquires the lock. 
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13. (Original) The computer-readable storage medium of claim 12, 
wherein the first policy is configured to command resources in the distributed 
computing system to perform actions so that the distributed computing system 
operates in accordance with a rile that is enforced by the first policy, wherein the 
rule governs behavior of resour:es within the distributed computing system. 

14. (Original) The comf uter-readable storage medium of claim 12, 
wherein the method further con prises throwing an exception if the controller does 
not hold the lock on the lockage resource and if the controller does not acquire 
the lock. 

15. (Original) The comj uter-readable storage medium of claim 12, 
wherein locks held by the controller expire after a pre-specified lease period, 
unless the lease is renewed wit lin the pre-specified lease period. 

16. (Currently amended) An apparatus that provides concurrency control 
within a policy-based management system that controls resources in a distributed 
computing system, the apparatus comprising: 

a receiving mechanism that receives a request to perform an operation on a 
lockable resource from a controller in the distributed computing system, wherein 

one or more independent locks providing access to 
independent sub-units of the Resource and wherein the one or more independent 
locks allow multiple controllers to lock independent sub-units of the lockable 



resource independently; 

wherein the controller 



lockable resource, whereby a 



and a policy governing the controller comprise a 



policy may control a lock on a second policy and the 



second policy may control a lock on a lockable resource; 
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that 



wherein the controller sends 
for controlling resources in the 

a determining mechanism 
lock on the lockable resource; 

an execution mechanism 

allow the corltroller 
does not hold the 

allow the controller 
resource if the controller 



17. (Original) The apparatus 



the request in order to enforce a first policy 
distributed computing system; 

determines whether the controller holds a 



that 



18. (Original) The apparatu 
mechanism is configured to throw 
lock on the lockable resource and i 



3 of claim 16, wherein the execution 
in exception if the controller does not hold the 
the controller does not acquire the lock. 



19. (Original) The apparatus 
resource expires after a pre-specifi id 
within the pre-specified lease period. 



includes a resource within the distr 



is configured to, 

to acquire the lock if the controller 
on the lockable resource, and to 

to execute the operation on the lockable 
holds the lock on the lockable resource. 



of claim 16, wherein the first policy is 
configured to command resources in the distributed computing system to perform 
actions so that the distributed computing system operates in accordance with a 
rule that is enforced by the first poli cy, wherein the rule governs behavior of 
resources within the distributed computing system. 



of claim 16, wherein the lock on the lockable 
lease period, unless the lease is renewed 



20. (Original) The apparatus of claim 16, wherein the lockable resource 



buted computing system. 
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1 21. (Original) ThJapparatus of claim 16, wherein the lockable resource 

2 includes a second policy/for controlling resources in the distributed computing 

3 system. 




1 22. (Original) The apparatus of claim 16, wherein the controller includes a 

2 client in the distributed computing system. 



1 23. (Original) 

2 the first policy for 
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24. (Original) 
higher-level policy f< 



The apparatus of claim 16, wherein the controller includes 
controlling resources in the distributed computing system. 



The apparatus of claim 16, wherein the controller includes a 
controlling resources in the distributed computing system, 
and wherein the lockable resource includes a lower-level policy for controlling 
resources in the distributed computing system. 



1 25. (Original) The apparatus of claim 16, wherein the execution 

2 mechanism is configured to allow the controller to acquire the lock from a 

3 resource that allocates locks to controllers. 



26. (Cancelled) 
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